A strategy that focuses on protecting critical infrastructure, networks, and information systems from cyber-attacks.